Response to Office Action dated 07/05/2007 
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This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A method comprising: 

(a) connecting a user device via a publicly-accessible network to a server; 

(b) receiving a certificate; 

(c) calculating an identifier of the received certificate and converting it to a character 

string; 

(d) modifying the string by removing at least one random character from the string; 

(e) displaying the modified string; 

(f) receiving, from a user pr e viously provided with th e identifier through a trust e d 
medium, input corresponding to the at least one removed character; and 

(g) continuing connection to the server only if the user input matches the at least one 
removed character. 

2. (Original) The method of claim 1, further comprising randomly selecting multiple 
characters for removal. 

3. (Original) The method of claim 2, wherein the randomly selected characters are 
replaced with a character indicating the replacement. 

4. (Original) The method of claim 2, wherein the modified string is displayed with 
spaces replacing the removed characters. 

5. (Original) The method of claim 1, wherein the device is a mobile telephone and the 
at least one removed character is a digit. 

6. (Original) The method of claim 1, wherein receiving the certificate comprises 
receiving the certificate from a certification authority. 
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7. (Original) The method of claim 1, wherein the position of the at least one character 
removed from the string is different during a subsequent connection attempt. 

8. (Original) The method of claim 1, wherein the at least one removed character is 
removed based on the capabilities of the user device. 

9. (Previously presented) The method of claim 1, wherein receiving input corresponding to 
the at least one removed character comprises receiving input from a user previously provided 
with the identifier through mail or a company newsletter. 

10. (Original) The method of claim 1, wherein the at least one removed character is a 
digit, and wherein no non-digit characters are removed. 

1 1 . (Original) The method of claim 1 , further comprising: 

repeating steps (a) through (g) on each attempt to connect the device to the server. 

12. (Currently Amended) A device comprising: 

an interface configured to access a publicly accessible network; and 

a processor configured to perform st e ps comprising : 

receiving, via the interface, a certificate from a remotely located server, 
calculating an identifier of the received certificate and converting it to a character 

string, 

modifying the string by removing at least one random character from the string, 
displaying the modified string, 

receiving, from a user of the device previously provided with the id e ntifi e r 
through a trust e d medium , input corresponding to the at least one removed character, and 

continuing connection to the server only if the user input matches the at least one 
removed character. 

1 3 . (Currently Amended) A machine-readable medium having machine-executable 
instructions for performing steps comprising : 
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(a) connecting a user device via a publicly-accessible network to a server; 

(b) receiving a certificate; 

(e) calculating an identifier of the received certificate and converting it to a character 

string; 

(d) modifying the string by removing at least one random character from the string; 

(e) displaying the modified string; 

{£) receiving, from a user previously provided with th e identifi e r through a trusted 
medium , input corresponding to the at least one removed character; and 

(g) continuing connection to the server only if the user input matches the at least one 
removed character. 

14. (Currently Amended) A method for conducting secure communications, comprising: 

(a) connecting a user device via a publicly-accessible network to a server; 

(b) receiving a certificate; 

(e) receiving a modified identifier, the identifier having previously been calculated for 
the certificate outside of the user device and modified outside of the user device by removal of at 
least one random character; 

(e) displaying the modified identifier; 

(f) receiving, from a user previously provided with the identifier through a trust e d 
medium , input corresponding to the at least one removed character; and 

(g) continuing connection to the server only if the user input matches the at least one 
removed character. 

15. (New) The method of claim 1, wherein the identifier was previously provided to the user 
through a trusted medium. 

16. (New) The device of claim 12, wherein the identifier was previously provided to the user 
through a trusted medium. 

17. (New) The device of claim 12, wherein the processor is further configured to perform: 
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randomly selecting multiple characters for removal, wherein the randomly selected 
characters are replaced with a character indicating the replacement. 

1 8. (New) The device of claim 12, wherein the modified string is displayed with spaces 
replacing the removed characters. 

19. (New) The device of claim 12, wherein the device is a mobile telephone and the at least 
one removed character is a digit. 

20. (New) The device of claim 12, wherein the position of the at least one character removed 
from the string is different during a subsequent connection attempt. 
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REMARKS 

The Office Action of July 5, 2007, has been reviewed and the comments therein were 
carefully considered. Claims 1-14 are pending in the application. Claims 1-14 are rejected by 
the Examiner. 

Claim Amendments 

Applicants have amended Claims 1, 12 , 13 and 14 to clarify the scope of the claims. 
Applicants have also added new claims 15-20, which include subject matter previously recited in 
various claims. Applicants assert that these amendments do not include new subject matter. 

Obviousness-Type Double Patenting 

Claims 1-14 are provisionally rejected on the ground of obviousness-type double 
patenting as being unpatentable over claims 1-48 of co-pending U.S. Patent Application No. 
1 0/609,0 1 1 . Applicants traverse this provisional rejection. 

The Office Action states that "Although the conflicting claims [between the two 
applications] are not identical, they are not patentably distinct from each other because both 
secure communication lines using certificates and key pairs." Applicants respectfully assert that 
just because the conflicting claims allegedly describe secure communication lines, certificates 
and key pairs, this does not make the claims patentably distinct. Each and every element recited 
by the claims is necessary to determine the scope of the invention, and the mere inclusion of 
some common elements between claims does not make the claims not patentably distinct. 

Further, Applicants note that the claims of U.S. Patent Application No. 10/609,011 have 
been changed in material respects from the claims at the time the restriction requirement was 
made. The office action date is July 5, 2007. The claims in Application No. 10/609,011 were 
amended in an amendment file August 24, 2007. Therefore this provisional rejection should not 
be maintained. MPEP §804.01(B). Accordingly, Applicants request that this provisional 
rejection be withdrawn. 
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